Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File:                     0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier:          CgOtWcrJO0O4NRro+ekFyHwNHPWRJUGO4W9QhCEWxBQ=
Subject key identifier:   6C:68:80:3C:B3:D7:D9:82:D8:32:3A:3F:3C:8D:6E:E0:70:58:E9:22
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer:       /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial:       019CAAFD35857F28F2DC3CAD7B59536E2C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number:          0806
Signing time:             Sun 01 Mar 2026 20:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:46 +0000
Files and hashes:         1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: RsIGHqvicQDO/CMvIcd8otHOqMdoyDHe8U52C0zJc20=)
                          2: JNb8qAOe82PBo3QGsaNX-y91s-c.roa (hash: N4b3iRyhTXcqX/rj0VSG64RSyTYz/SivUVU9/ij649s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:35:85:7f:28:f2:dc:3c:ad:7b:59:53:6e:2c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
        Validity
            Not Before: Mar  1 20:00:46 2026 GMT
            Not After : Mar  2 20:00:46 2026 GMT
        Subject: CN=6c68803cb3d7d982d8323a3f3c8d6ee07058e922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:b2:b0:b9:84:22:39:42:ee:65:91:ce:b2:
                    ba:d3:3a:70:e6:56:f8:19:bf:84:1b:93:c4:1d:1b:
                    66:18:03:f4:a6:0a:43:01:3a:27:de:de:e7:c6:f1:
                    3c:b0:fc:31:d8:4b:c0:a6:53:b1:c4:1c:5b:67:c8:
                    69:99:07:c8:f0:c9:76:64:14:ec:a1:9d:8d:92:88:
                    b7:6c:6a:a4:bb:a4:3e:2d:50:08:2f:43:dc:e7:6c:
                    80:f6:16:5d:91:86:5b:8f:ca:1e:65:da:cd:fc:82:
                    af:7b:52:65:73:6e:fb:e5:c7:69:e9:d4:3c:f0:77:
                    ac:1d:ab:1f:68:fc:dc:5e:c9:09:5b:f4:5b:9c:10:
                    8a:1a:74:66:c4:32:82:03:d4:c9:6f:e8:53:c6:f6:
                    75:fe:e0:7d:ff:cb:4d:12:2c:f5:65:11:f5:f3:25:
                    66:1c:24:b2:c4:03:65:d1:0e:3a:e3:89:b3:c5:b7:
                    e6:34:fb:bf:2b:41:ba:22:2a:8d:ab:4a:d1:d9:66:
                    8d:61:02:54:b9:09:e7:2d:a4:4a:f8:36:2c:ef:fd:
                    6b:37:59:34:54:a5:ea:6e:35:8a:25:7d:2c:7c:9a:
                    f3:4e:8c:31:e3:fd:22:3d:e6:bb:65:1b:6e:00:b0:
                    93:d7:4e:93:1c:a5:e8:89:dc:62:d0:e9:fb:6e:d4:
                    cf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:80:3C:B3:D7:D9:82:D8:32:3A:3F:3C:8D:6E:E0:70:58:E9:22
            X509v3 Authority Key Identifier:
                keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:65:4c:92:2c:39:1b:29:39:1d:74:67:60:0a:6e:66:4d:90:
         77:8c:a8:bf:58:30:ca:3e:25:c5:49:07:bf:2a:63:64:13:c9:
         fa:5e:36:fc:9b:43:13:12:fa:f2:41:fc:8d:0f:0e:6f:b1:30:
         f4:30:4b:59:96:19:68:b0:c2:54:fc:49:ab:7e:95:13:e5:b5:
         1a:29:3a:23:a6:ab:e0:04:15:31:77:a0:cf:dc:f6:7b:2f:e3:
         d6:d1:ed:2e:26:22:db:75:60:c2:e8:7c:14:bd:0c:63:b5:44:
         6b:70:dc:48:82:fe:ec:da:f6:e9:6b:2c:6b:d1:cd:71:6b:f1:
         03:2b:42:2e:1f:f7:6c:7f:f6:6c:b9:c6:19:92:43:d7:36:72:
         b0:32:4a:cf:44:ba:8c:97:83:ee:15:e8:fe:32:7a:aa:23:49:
         e6:cc:09:6a:98:8b:e3:25:ad:9a:e9:89:c8:7a:62:0c:d8:10:
         09:96:dd:a0:50:98:00:57:bc:d2:71:ce:3a:77:fe:2a:e0:86:
         bc:bd:b1:9d:ef:40:af:27:ec:bf:45:0b:b7:8b:a7:22:59:1d:
         28:af:d0:2c:2e:0f:bf:46:87:0a:f1:c9:37:7e:a0:ce:23:67:
         a3:be:c7:19:86:f9:39:86:6d:b1:5e:c0:92:aa:77:c8:c1:d1:
         d3:25:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:11 2026 by rpki-client